Privacy Policy

Last updated: 8 April 2026

Who we are

Autoeight is an AI and automation agency based in Halifax, West Yorkshire, England. When we say "we", "us", or "our" in this policy, we mean Autoeight.

If you have questions about this policy or want to exercise your data rights, email us at [email protected].

What data we collect

When you visit autoeight.ai and accept our cookie consent banner, we collect the following data to understand which companies (not individuals) are visiting our site:

• IP address — used to identify your organisation via public business registries. Your IP is stored in our database and linked to the identified company.
• Pages visited — which pages you view, how long you spend on each, and the order you visit them.
• Session data — when you arrived, how long you stayed, and your entry and exit pages.
• Referrer URL — where you came from (e.g. Google, LinkedIn, a direct visit).
• UTM parameters — marketing campaign tags if present in the URL.
• Device information — device type (desktop, mobile, tablet), browser name, operating system, and screen resolution.
• Browser fingerprint — a non-reversible hash derived from your device settings (screen size, timezone, language). This helps us count unique visitors without using traditional tracking cookies.

What we do NOT collect

We do not collect your name, email address, phone number, or any other information that directly identifies you as an individual. Our system identifies the company or organisation associated with your IP address, not you personally.

How we identify companies

We use your IP address to look up which organisation it belongs to. This is done through:

• IPinfo.io — a third-party IP intelligence service that maps IP addresses to organisations.
• RIPE RDAP — the public European IP address registry.
• ARIN RDAP — the public North American IP address registry.

If your IP address belongs to a consumer internet provider (e.g. BT, Vodafone, Sky), we flag it as residential/ISP traffic. We cannot identify individuals using home broadband.

Why we collect this data (lawful basis)

We rely on two lawful bases under the UK General Data Protection Regulation (UK GDPR):

• Consent (Article 6(1)(a)) — We only begin tracking after you click "Accept" on our cookie consent banner. If you decline or ignore the banner, no tracking data is collected.
• Legitimate interest (Article 6(1)(f)) — We have a legitimate business interest in understanding which companies visit our website so we can improve our services and identify potential business opportunities. This interest does not override your rights because we identify organisations, not individuals, and you can withdraw consent at any time.

Cookies and local storage

We do not use traditional HTTP cookies. Instead, we use browser storage mechanisms that function similarly:

Name	Type	Purpose	Duration
ae_consent	localStorage	Stores your consent choice (accepted/declined)	Until cleared
ae_sid	sessionStorage	Anonymous session identifier	Until tab closed
ae_fid	localStorage	Browser fingerprint hash (only set if you accept)	Until cleared

The ae_consent item is set regardless of your choice to remember your preference. The other items are only set if you click "Accept".

Third-party services

We use the following third-party services that may process your data:

• Supabase (database hosting) — stores visitor analytics data on servers in the EU. Supabase Privacy Policy
• IPinfo.io (IP enrichment) — receives your IP address to return organisation data. IPinfo Privacy Policy
• Cloudflare (CDN/security) — processes requests to deliver our website. Cloudflare Privacy Policy
• Google Fonts (typography) — loads fonts from Google servers. Google Privacy Policy

How long we keep your data

Visitor analytics data (IP addresses, sessions, page views, and company records) is automatically deleted after 12 months from the date of your last visit. If you request deletion sooner, we will action it within 30 days.

Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data ("right to be forgotten").
• Restriction — ask us to limit how we process your data.
• Portability — receive your data in a portable format.
• Object — object to processing based on legitimate interest.
• Withdraw consent — withdraw your consent at any time (see below).

To exercise any of these rights, email [email protected]. We will respond within 30 days.

How to withdraw consent

You can withdraw your consent at any time by:

• Clicking "Manage Cookies" in the footer of any page, then selecting "Decline".
• Clearing your browser's local storage for autoeight.ai.

Withdrawing consent stops future tracking. It does not affect data already collected while consent was active. To have existing data deleted, email us at [email protected].

Children's privacy

Our website is not directed at children under 16. We do not knowingly collect data from children. If you believe we have, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page will always reflect the most recent version. We will not reduce your rights under this policy without your consent.

Complaints

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO):

• Website: ico.org.uk/make-a-complaint
• Phone: 0303 123 1113